Comarch

Products

ProductCVEsExploitedLatest
ERP XL3–Feb 15, 2024
ERP Optima2–May 14, 2026

Exploited and recent CVEs

  • CVE-2025-68420 High 7.5 Privilege Escalation in Comarch ERP Optima 0.1%
  • CVE-2025-68421 High 8.7 Hardcoded credentials in Comarch ERP Optima 0.2%
  • CVE-2023-4539 High 7.5 Hardcoded password in Comarch ERP XL 0.5%
  • CVE-2023-4538 Medium 6.2 Shared Key in Comarch ERP XL 0.4%
  • CVE-2023-4537 High 7.4 Protocol Downgrade in Comarch ERP XL 0.6%